Lucene search
K

22 matches found

OSV
OSV
added 2026/06/11 2:51 a.m.8 views

MAL-2026-5552 Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42987119346b57a7014465a5a7bec3c00d1928e7e41d999152aa4e2f814c298e On npm install, the package's postinstall runs scripts/inject.js, which walks up from the current working directory to locate the consumer project's...

5.5AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/17 6:20 a.m.6 views

Malicious code in express-security-policy (npm)

Package is malicious. It exfiltrates user/host info to a remote server with obfuscation, delayed execution, and error suppression via preinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

5.8AI score
Exploits0References1
OSV
OSV
added 2026/04/17 6:20 a.m.4 views

MAL-2026-2828 Malicious code in express-security-policy (npm)

Package is malicious. It exfiltrates user/host info to a remote server with obfuscation, delayed execution, and error suppression via preinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

5.8AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 12:50 p.m.5 views

Malicious code in express-security-suite-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a815ee205469c15d2e85b104bc9d3e945c7f347a3c26f0ef26e3d38746014c The package express-security-suite-2024 was found to contain malicious code...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/18 12:50 p.m.3 views

MAL-2026-1733 Malicious code in express-security-suite-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a815ee205469c15d2e85b104bc9d3e945c7f347a3c26f0ef26e3d38746014c The package express-security-suite-2024 was found to contain malicious code...

5.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2002-2181

Malware in sbrugna...

3.8CVSS6.4AI score0.01295EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-1282

Malware in sbrugna...

8.1CVSS6.5AI score0.0157EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-1100

Malware in sbrugna...

8.8CVSS8.6AI score0.00457EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-32064

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00661EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-34766 Malicious code in test-aws-xray-sdk-express (npm)

The package test-aws-xray-sdk-express was found to contain malicious code...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/06/19 12:0 a.m.3 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Express vulnerabilities (USN-7581-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7581-1 advisory. It was discovered that Express incorrectly handled certain URLs, leading to an open redirect...

6.1CVSS5.6AI score0.00786EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 9:30 p.m.5 views

CVE-2021-21422

mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, howev...

8.1CVSS6.5AI score0.0157EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:37 p.m.6 views

CVE-2020-2971

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS6.2AI score0.00699EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:32 p.m.3 views

CVE-2020-24391

mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769...

9.8CVSS6.8AI score0.75088EPSS
Exploits1
securityvulns
securityvulns
added 2004/08/30 12:0 a.m.24 views

Microsoft Outlook Express information leak

Bcc: header may not be stripped for partial multipart MIME message...

1.3AI score
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2001/02/23 12:0 a.m.38 views

Security Bulletin MS01-012

---------------------------------------------------------------------- Title: Outlook, Outlook Express Vcard Handler Contains Unchecked Buffer Date: 22 February 2001 Software: Outlook, Outlook Express Impact: Run code of attacker's choice Bulletin: MS01-012 Microsoft encourages customers to...

0.3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.7 views

Cumulative Security Update for Outlook Express 6 SP1 (KB823353)

A vulnerability exists in Outlook Express that could allow an attacker to cause Outlook Express to fail. You can help protect your computer by installing this update. After you install this update you may need to restart your computer...

2.4AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB941202)

A security issue has been identified in Outlook Express that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

2.7AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.16 views

Security Update for Outlook Express for Windows Server 2003 (KB941202)

A security issue has been identified in Outlook Express that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

2.8AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.14 views

Security Update for Outlook Express for Windows XP (KB941202)

A security issue has been identified in Outlook Express that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

2.7AI score
Exploits0
Rows per page
Query Builder